>> SSHD is packaged and available on Debian. > Timothy, for a console on localhost do you use ssh exclusively? Never > xterm or similar? You authenticate every connection to localhost?
Hmm...`xterm` is unrelated: you'd run `telnet` or `ssh` *inside* `xterm`, no *instead of* `xterm`. > Naively, I wouldn't expect TLS to be necessary for localhost. When you want to "log into localhost" you can usually use `su` instead of `ssh/telnet`. This said, I sometimes use `ssh` anyway (typically in scripts) so it works the same for local and non-local connections. Presumably encryption is not needed for localhost (tho I'm not completely sure to what extent there could be non-root processes which could listen on the connection via the loopback device), but as long as you're not transferring large amounts of data the overhead of encryption should be lost in the noise. Stefan